Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa
File:                     3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa (raw, json)
Hash identifier:          y0IZ3ycMWYQ6QTfuiT9sUzw4VmOn+y3zen0Cvb6m5Fk=
Subject key identifier:   8C:8C:27:B3:72:AC:DA:02:F1:4A:23:9F:0E:10:B2:31:60:1D:49:D5
Certificate issuer:       /CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
Certificate serial:       014099D51C025CBE4924BF6A5159B5F359C76C65
Authority key identifier: 50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa
Signing time:             Fri 27 Mar 2026 11:52:53 +0000
ROA not before:           Fri 27 Mar 2026 11:47:53 +0000
ROA not after:            Fri 26 Mar 2027 11:52:53 +0000
asID:                     271666
IP address blocks:        160.238.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl
                          rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:40:99:d5:1c:02:5c:be:49:24:bf:6a:51:59:b5:f3:59:c7:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C8623F093C1AA2BCA40917A25C1F33B6FF33D7
        Validity
            Not Before: Mar 27 11:47:53 2026 GMT
            Not After : Mar 26 11:52:53 2027 GMT
        Subject: CN=8C8C27B372ACDA02F14A239F0E10B231601D49D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:d4:c1:b9:ae:88:27:5c:9b:31:01:1b:ad:
                    94:00:69:4c:32:b3:d6:a0:14:65:cd:fa:79:8d:9a:
                    35:6d:14:5f:62:73:3f:64:64:ad:38:e9:3d:d6:8d:
                    bd:64:b8:e1:0f:0e:1c:63:0c:18:87:bc:0c:5d:40:
                    af:00:b7:16:8a:b8:6a:c5:4d:be:d3:64:70:d8:53:
                    4d:2e:0c:12:6b:95:3d:a5:cf:c9:3b:61:9f:31:2b:
                    78:5c:d0:8c:ce:55:d1:c2:9e:87:7a:7f:9a:3c:c1:
                    d7:57:1a:41:21:49:8e:e8:a1:51:69:72:d9:f3:17:
                    c2:ab:57:e5:e2:c7:ce:4f:66:db:d0:3b:4b:80:99:
                    5c:95:a3:2f:da:fc:eb:db:7e:a6:43:6c:6b:00:99:
                    1d:77:dc:af:ea:44:4a:17:e9:5a:11:8e:04:1f:07:
                    cb:ba:d7:25:86:b7:84:6c:8c:d8:cb:41:41:64:46:
                    96:82:eb:df:4a:80:fc:76:09:03:38:48:05:aa:8b:
                    a5:63:f2:9d:1f:23:a5:c2:d4:cc:40:1d:bc:83:2d:
                    4b:3a:2d:af:b0:6f:dc:aa:56:d7:34:08:28:df:42:
                    0d:e1:9d:ba:0e:d8:a5:1c:c9:4c:5f:39:b0:f8:01:
                    32:00:87:9e:23:e3:d8:5c:84:40:0d:3e:59:eb:ee:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:27:B3:72:AC:DA:02:F1:4A:23:9F:0E:10:B2:31:60:1D:49:D5
            X509v3 Authority Key Identifier:
                keyid:50:C8:62:3F:09:3C:1A:A2:BC:A4:09:17:A2:5C:1F:33:B6:FF:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C8623F093C1AA2BCA40917A25C1F33B6FF33D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSBSxzkPff9DYvmR2C6T83CLVKsM4JM6yFFgyp8KHFYy/0/3136302e3233382e3134302e302f32342d3234203d3e20323731363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:e0:5d:3d:ef:7a:61:12:1d:84:fd:82:5c:02:17:a5:99:68:
         b7:a7:3f:ac:34:aa:69:6a:64:5b:ba:4d:54:ea:d1:17:60:23:
         19:54:46:32:b9:95:7a:9e:e7:43:78:b2:80:3f:d8:83:b9:94:
         56:fe:07:99:1b:ce:8a:f1:09:56:5c:e6:04:d8:6c:3f:06:2d:
         a1:1f:ab:48:1f:5e:d8:dc:fa:2e:df:cc:1c:92:19:8f:72:d8:
         6e:90:ef:17:0a:bd:f5:70:6c:c7:9d:2d:45:78:8a:79:0a:ab:
         58:40:66:af:f0:e2:8d:65:2a:1e:10:b8:ff:f7:dd:1f:b7:f7:
         54:d8:2b:8c:c3:a6:de:a7:b5:57:c7:6a:1a:a6:02:b6:d3:f6:
         3b:c0:74:d6:db:7a:da:db:3c:1c:b8:59:75:0b:51:56:0d:02:
         dc:02:89:75:16:58:bd:1b:54:d1:21:3b:6f:50:5a:3c:32:b1:
         4d:5e:5f:39:01:00:f8:21:b2:1d:f2:9f:18:15:4f:68:c7:c5:
         f2:b7:d4:6e:f9:7e:38:2c:e5:5b:b0:1a:1d:11:3f:f1:f6:0d:
         f2:e7:bc:c4:62:bc:52:0c:33:78:7e:7d:e9:f5:89:65:04:cd:
         15:9a:90:c3:9f:57:cc:7a:d8:e5:81:23:30:a2:12:09:08:9b:
         dd:59:ae:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAUCZ1RwCXL5JJL9qUVm181nHbGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBDODYyM0YwOTNDMUFBMkJDQTQwOTE3QTI1QzFGMzNC
NkZGMzNENzAeFw0yNjAzMjcxMTQ3NTNaFw0yNzAzMjYxMTUyNTNaMDMxMTAvBgNV
BAMTKDhDOEMyN0IzNzJBQ0RBMDJGMTRBMjM5RjBFMTBCMjMxNjAxRDQ5RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYNTBua6IJ1ybMQEbrZQAaUwy
s9agFGXN+nmNmjVtFF9icz9kZK046T3Wjb1kuOEPDhxjDBiHvAxdQK8AtxaKuGrF
Tb7TZHDYU00uDBJrlT2lz8k7YZ8xK3hc0IzOVdHCnod6f5o8wddXGkEhSY7ooVFp
ctnzF8KrV+Xix85PZtvQO0uAmVyVoy/a/OvbfqZDbGsAmR133K/qREoX6VoRjgQf
B8u61yWGt4RsjNjLQUFkRpaC699KgPx2CQM4SAWqi6Vj8p0fI6XC1MxAHbyDLUs6
La+wb9yqVtc0CCjfQg3hnboO2KUcyUxfObD4ATIAh54j49hchEANPlnr7sCJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjIwns3Ks2gLxSiOfDhCyMWAdSdUwHwYDVR0j
BBgwFoAUUMhiPwk8GqK8pAkXolwfM7b/M9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNCU3h6a1BmZjlEWXZtUjJDNlQ4M0NMVktzTTRKTTZ5RkZneXA4S0hG
WXkvMC81MEM4NjIzRjA5M0MxQUEyQkNBNDA5MTdBMjVDMUYzM0I2RkYzM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzg2MjNGMDkzQzFBQTJC
Q0E0MDkxN0EyNUMxRjMzQjZGRjMzRDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTQlN4emtQZmY5RFl2bVIyQzZUODNDTFZLc000Sk02eUZGZ3lwOEtIRll5LzAv
MzEzNjMwMmUzMjMzMzgyZTMxMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDujDANBgkqhkiG9w0BAQsFAAOCAQEAx+Bd
Pe96YRIdhP2CXAIXpZlot6c/rDSqaWpkW7pNVOrRF2AjGVRGMrmVep7nQ3iygD/Y
g7mUVv4HmRvOivEJVlzmBNhsPwYtoR+rSB9e2Nz6Lt/MHJIZj3LYbpDvFwq99XBs
x50tRXiKeQqrWEBmr/DijWUqHhC4//fdH7f3VNgrjMOm3qe1V8dqGqYCttP2O8B0
1tt62ts8HLhZdQtRVg0C3AKJdRZYvRtU0SE7b1BaPDKxTV5fOQEA+CGyHfKfGBVP
aMfF8rfUbvl+OCzlW7AaHRE/8fYN8ue8xGK8UgwzeH596fWJZQTNFZqQw59XzHrY
5YEjMKISCQib3Vmuvw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 17:57:39 2026 by rpki-client